Course Overview
This course introduces learners to Intel Software Guard Extensions (Intel SGX) in a container, specifically focusing on Azure Confidential computing on AKS. It covers how Gramine and Gramine Shielded Containers support unmodified applications to run inside an Enclave and how to set up Gramine secret provisioning. The course includes a lab where learners practice creating server and client images, deploying them in an AKS confidential compute cluster, and checking SGX quote generation and verification. The course is designed for learners with a basic understanding of Azure Confidential Computing, Kubernetes, Gramine, and Gramine Shielded Containers. By the end of the course, learners will be able to explain Azure Confidential computing on AKS, demonstrate how Gramine supports unmodified applications, and practice setting up Gramine secret provisioning.